Scenarios
Event-Driven Data Pipeline
High-volume ingestion through Event Hubs, landed in Storage as a data lake, with Azure SQL serving the curated layer.
Tier 1 — 1 hour RPO/RTO. Business-critical. Significant business impact if unavailable for more than an hour.
Zonal (AZ) redundancy
Regional / cross-region
Bottlenecked by Event Hubs
| Component | Zonal (AZ) redundancy | Regional / cross-region | |
|---|---|---|---|
| Event Hubs Messaging | RPO 0·RTO Seconds — automatic | RPO Undefined for event data — unconsumed events since the last successful capture/consumption are lost on failover unless separately protected·RTO Minutes once triggered — pairing break and repoint | |
| Storage Account (Blob / Files / Queue / Table) Storage | RPO 0·RTO Effectively 0 — reads/writes continue through a zone loss; some DNS repointing may briefly affect in-flight requests | RPO ≤15 min, SLA-backed — but only for Block Blobs. Files/Tables/Queues/Page Blobs replicate best-effort with no committed RPO·RTO Reads: near-0, automatic, 99.99% SLA on the RA- secondary endpoint. Writes: failover process plus DNS update, typically under an hour once triggered | |
| Azure SQL Database Data | RPO 0·RTO Well under a minute — typically low seconds for Business Critical | RPO Typically ~5 seconds under normal load — not a hard guarantee, and lag can grow under heavy write volume·RTO Seconds once triggered for a clean (no-data-loss) failover — but only after you detect the outage and initiate it | |
| Key Vault Security | RPO 0·RTO Near-instant — fully platform-managed, not customer-observable | RPO Not zero, and not committed — replication to the paired region is asynchronous, so changes made shortly before a region failure can be lost. Microsoft publishes no RPO number for this feature.·RTO Not customer-controlled and not committed — Microsoft's own guidance says failover 'can take several hours after the loss of the primary region, or longer,' and isn't necessarily aligned with when other Azure services in the region fail over. Your vault may just be unavailable until Microsoft acts. |